update oss pom dependency

version 5 does not work well with maven 3.1.0, since the plugin versions it refers to are known to have compatibility problems